events.html #3

<html>
<b>STANDARD EVENT SET</b><br>
<p>
Events are logged, printed, and entered all in the same manner. There
are thee types of events: two-letter, three-letter, and the Message-Id: header.
Each has it own rules.

<h3>Two-letter Events</h3>
Two-letter event names specify a numeric count and are printed
or specified with the name followed (with no space) by an equal
sign, and then (with no space) by the value.
The value is always specified as a positive integer.
<p>
<ul><table cellpadding="10" border="1">
<tr><td><p><code><b>er</b>=<i>value</i></code></td>
	<td>
	specifies ENVELOPE recipients, where
	the <code><i>value</i></code> is a combined good and bad
	recipient count.
	</td></tr>
<tr><td><p><code><b>hr</b>=<i>value</i></code></td>
	<td>
	specifies HEADER recipients, where
	the <code><i>value</i></code> is the total of all To:, Cc:, 
	and Bcc: recipients.
	</td></tr>
<tr><td><p><code><b>ho</b>=<i>value</i></code></td>
	<td>
	specifies HONEY POT recipients, where
	the <code><i>value</i></code> is the total count of honey-pot
	recipients.
	(Also see <a href="../conf/honeyfile.html">HoneyFile</a> in the
	configuration file.)
	</td></tr>
<tr><td><p><code><b>br</b>=<i>value</i></code></td>
	<td>
	specifies BAD ENVELOPE recipients, where
	the <code><i>value</i></code> is the count of bad recipients.
	(Note that you must <a href="../sendmail/patch.html">patch</a> sendmail
	if you are running V8.12, for this count to work.)
	</td></tr>
</ul></table>
<h3>Three-Letter Events</h3>
Three-letter event names specify boolean values. If present,
they mean TRUE, and if absent they mean FALSE. Boolean expressions
stand, or are specified, alone (no equal sign).
<p>
<ul><table cellpadding="10" border="1">
<tr><td><p><code><b>hed</b></code></td>
	<td>
	boolean, where TRUE (present) means there were too many HEADER recipients. 
	(Also see <a href="../conf/maxheaderrcpts.html">MaxHeaderRcpts</a>
	in the configuration file.)
	</td></tr>
<tr><td><p><code><b>env</b></code></td>
	<td>
	boolean, where TRUE (present) means there were too many ENVELOPE recipients.
	(Also see <a href="../conf/maxrcptsperenvelope.html">MaxRcptsPerEnvelope</a>
	in the configuration file.)
	</td></tr>
<tr><td><p><code><b>hon</b></code></td>
	<td>
	boolean, where TRUE (present) means there was at least one HONEY POT recipient.
	(Also see <a href="../conf/honeyfile.html">HoneyFile</a>
	in the configuration file.)
	</td></tr>
<tr><td><p><code><b>mid</b></code></td>
	<td>
	boolean, where TRUE (present) means there was a bad or missing Message-Id: header.
	(Also see <a href="../conf/checkmessageid.html">CheckMessageId</a>
	in the configuration file.)
	</td></tr>
<tr><td><p><code><b>frm</b></code></td>
	<td>
	boolean, where TRUE (present) means there was a bad or missing From: header.
	(Also see <a href="../conf/checkfromheader.html">CheckFromHeader</a> 
	in the configuration file.)
	</td></tr>
<tr><td><p><code><b>bho</b></code></td>
	<td>
	boolean, where TRUE (present) means there was a bad ENVELOPE sender host.
	(Also see <a href="../conf/checksenderhost">CheckSenderHost</a> 
	in the configuration file.)
	</td></tr>
<tr><td><p><code><b>rbl</b></code></td>
	<td>
	boolean, where TRUE (present) means that the IP number was looked up
	at one or more RBL sites and found to be bad.
	(Also see <a href="../conf/rbllist.html">RBLlist</a> 
	in the configuration file.)
	</td></tr>
<tr><td><p><code><b>abo</b></code></td>
	<td>
	boolean, where TRUE (present) means sendmail, or an earlier Milter,
	rejected the envelope or connection for this IP number.
	(Also see <a href="../conf/milterabort.html">MilterAbort</a> 
	in the configuration file.)
	</td></tr>
<tr><td><p><code><b>pip</b></code></td>
	<td>
	boolean, where TRUE (present) means that the sending site attempted to
	pipeline before acceptance of pipelining was announced by sendmail.
	(Also see <a href="../conf/advancewrite.html">AdvanceWrite</a> 
	in the configuration file, and
	<a href="../sendmail/patch.html">patching sendmail</a>.)
	</td></tr>
<tr><td><p><code><b>for</b></code></td>
	<td>
	boolean, where TRUE (present) means that sendmail thought the the
	sending site's hostname/IP-number combination was forged.
	</td></tr>
<tr><td><p><code><b>mmx</b></code></td>
	<td>
	boolean, where TRUE (present) means that this envelope was received
	from one of our MX servers.
	(Also see <a href="../conf/lookbackone.html">LookBackOne</a> 
	and <a href="../conf/localhostname.html">LocalHostName</a> 
	in the configuration file.)
	</td></tr>
<tr><td><p><code><b>net</b></code></td>
	<td>
	boolean, where TRUE (present) means the message was received on a
	non-AF_INET network interface, such as the loopback interface.
	</td></tr>
<tr><td><p><code><b>aip</b></code></td>
	<td>
	boolean, where TRUE (present) means this record's IP number
	is an alias for another IP number
	(Also see <a href="../conf/addipaliases.html">AddIPAliases</a> 
	in the configuration file.)
	</td></tr>
</ul></table>
<h3>The Message-Id: Header</h3>
The Messsage-Id: header's value is specified by a
<code><b>msgid</b></code> keyword. Because the Messsage-Id: header's value
is enclosed in angle-braces, you should always quote this value. For example:
<br><code><ul>
msgid="&lt;foo@bar.com&gt;"
</ul></code>
When this event is logged or printed, the quotation marks will be omitted.
If no Messsage-Id: header was present in the message, this event will
print and log as:
<br><code><ul>
msgid=
</ul></code>
</body>
</html>

#	Change	User	Description
#3	4052	bryan_costales	Implimented: whitelisting AddMXHost for MX servers that lie Converted to thread safe DNS routines garbage collection RunAsUser and RunAsGroup for root startups rebuild the database summarize by IP number Finished all documentation. Moved release from alpha to beta
#2	4030	bryan_costales	Finished documenting the configuration file Fixed a race condition and a core dump bug. Added hooks for whitelisting and IP aliasing Added support for Berkeley DB 4.2 Converted to htonl() and ntohl() Known Bugs: ip.db cannot be shared over NFS IP tracking from MX hosts can fail A RunAsUser config option is needed.
#1	3998	bryan_costales	Brought the whole distribution up to V0.9 Added a huge abount of documentation. Added slowedit find Created startup scripts to launch for testing Fixed numerous bugs. Fixed a few portablity issues. Installed hooks for whitelisting and IP aliases.